summaryrefslogtreecommitdiff
path: root/src/lib/libssl/d1_srvr.c
diff options
context:
space:
mode:
authorjsing <>2018-04-07 16:35:34 +0000
committerjsing <>2018-04-07 16:35:34 +0000
commitfa406a4e78813492e56384a03893357a094f6793 (patch)
tree00255fc63c35caf51fe96345ab5612a005915c5f /src/lib/libssl/d1_srvr.c
parent769107a3cc2677b916ec7283d1b1c89df9fbb318 (diff)
downloadopenbsd-fa406a4e78813492e56384a03893357a094f6793.tar.gz
openbsd-fa406a4e78813492e56384a03893357a094f6793.tar.bz2
openbsd-fa406a4e78813492e56384a03893357a094f6793.zip
Correct tls_config_clear_keys() behaviour.
Previously this incorrectly called tls_keypair_clear(), which results in the private key being cleared, along with the certificate, OCSP staple and pubkey hash. This breaks OCSP stapling if tls_config_clear_keys() is called following tls_configure(), as is done by httpd. Fix this by calling tls_keypair_clear_key() so that only the private key is cleared, leaving the other public data untouched. While here, remove tls_keypair_clear() and fold the necessary parts into tls_keypair_free(). ok beck@
Diffstat (limited to 'src/lib/libssl/d1_srvr.c')
0 files changed, 0 insertions, 0 deletions